Fedora EPEL 8 updates-testing report
by updates＠fedoraproject.org
The following Fedora EPEL 8 Security updates need testing:
Age URL
6 https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-287b3b64f6 halibut-1.3-3.el8
The following builds have been pushed to Fedora EPEL 8 updates-testing
python-bottle-0.12.21-2.el8
tio-1.39-1.el8
Details about builds:
================================================================================
python-bottle-0.12.21-2.el8 (FEDORA-EPEL-2022-17d14b279e)
Fast and simple WSGI-framework for small web-applications
--------------------------------------------------------------------------------
Update Information:
Cookie test fix backported from upstream (0.12) ---- Security fix for
CVE-2022-31799
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jun 13 2022 Ali Erdinc Koroglu <aekoroglu(a)centosproject.org> - 0.12.21-2
- Cookie test fix backported from upstream (0.12)
* Thu Jun 9 2022 Ali Erdinc Koroglu <aekoroglu(a)centosproject.org> - 0.12.21-1
- Update to 0.12.21 (rhbz #2094655 + #2094654 and #2021856)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2094654 - CVE-2022-31799 python-bottle: error mishandling during early request binding
https://bugzilla.redhat.com/show_bug.cgi?id=2094654
--------------------------------------------------------------------------------
================================================================================
tio-1.39-1.el8 (FEDORA-EPEL-2022-e7eeb6922a)
Simple TTY terminal I/O application
--------------------------------------------------------------------------------
Update Information:
# tio v1.39 * Improve key command response for local echo and timestamp *
Fix invalid hex character error message * Make sure only matched config
section is parsed * Add support for `disable` keyword in config file *
Unify error message formating * Cleanup list devices code * Fix command-
line `tty-device|config` parsing Allow user to add options on both sides of
the provided config argument. For example: `$ tio -b 9600 am64-evm -e`
Before, tio only allowed adding arguments after the config argument.
Implemented as simple as possible by introducing two stage option parsing. *
Update bash completion * Add support for IPv4 and IPv6 network sockets
Add support for IPv4 and IPv6 network sockets via socket syntax `inet:<port>`
and `inet6:<port>` respectively. For example, to listen and redirect serial
device I/O to a host bound IPv4 socket simply do: `$ tio /dev/ttyUSB0 --socket
inet:4444` To connect do e.g.: `$ nc 127.0.0.1 4444` Likewise, for
IPv6 do: `$ tio /dev/ttyUSB0 --socket inet6:4444` To connect do e.g.: `$ nc
::1 4444` If port is `0` or no port is provided default port `3333` is
used. * Fix tio deleting unix socket file If tio has a unix file socket
open, a second tio instance of tio may delete the socket file. This change fixes
so that it will not be deleted and tio will instead error and complain about
conflicting socket file. * Rework color option Rework the color option
to support setting ANSI color code values ranging from 0..255 or `none` for no
color or `list` to print a list of available ANSI colors codes. Also,
disables color when piping. * Remove print of hex mode status at startup *
Remove newline option in hex mode * Fix configfile memory leaks * Remove
command-line option inconsistencies Optional arguments, as parsed by the
`getopt_long` mechanism, are inherently inconsistent with how you define
required arguments. To avoid confusion we decide to avoid this
inconsistency by replacing optional options with additional options with
required argmuments. * Replace `1` with `enable` in config files *
Convert errors to warnings * Extended hexadecimal mode. While in hex
mode (`ctrl`-`t` `h`) you can output hexadecimal values. E.g.: to send `0x0A`
you have to type `0A` (always 2 characters). Added option `-x`, `--hex` to
start in hexadecimal mode. Added option `--newline-in-hex` to interpret
newline characters in hex mode. This is disabled by default, because, in my
opinion, hex stream is fundamentally different from text, so a "new line" is
meaningless in this context.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jun 12 2022 Robert Scheck <robert(a)fedoraproject.org> 1.39-1
- Upgrade to 1.39 (#2096097)
* Sat Jun 4 2022 Robert Scheck <robert(a)fedoraproject.org> 1.38-1
- Upgrade to 1.38 (#2092955)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2096097 - tio-1.39 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2096097
--------------------------------------------------------------------------------
